Revolut Ransomware Attack! Customer Passports and Selfies Begin to Be Exposed, Hackers Threaten "Daily Data Leaks"
Earlier reports by BlockBeats indicated that Revolut mistakenly provided some customer identity documents, account records, and even Bitcoin transaction records to unauthorized individuals due to a fraudulent data request that appeared to come from a legitimate government domain. The situation has now escalated: attackers claiming to possess this data have begun to publicly disclose some customer files and have made ransom demands to Revolut, threatening to release more data daily if the company refuses to pay.
UK financial media City AM reported on September 14 that an organization calling itself "Revolut Smilik" has confirmed to the media that it is demanding payment from Revolut and has threatened via Telegram to release "more and more data every day." The report noted that some well-known individuals' information has already been made public. Revolut has declined to disclose the number of affected individuals and has not commented on whether it will respond to the ransom demands.
This means that what was originally a data breach incident has now entered a more complicated "double extortion" phase.
Passports, Selfies, and Transaction Records May Become Ransom Chips
Revolut has confirmed that the incident originated from a "complex external impersonation scam." Unauthorized individuals sent data requests using an email account located within a legitimate government domain, leading Revolut to believe the requests were from a legitimate government entity and to provide customer data.
Reuters quoted Revolut as saying that the incident only affects a "very limited" number of customers, and that the company's systems and customer funds have not been compromised. After discovering the issue, Revolut has blocked the relevant addresses and reported it to government agencies, law enforcement, data protection, and financial regulatory authorities.
However, customer notifications indicate that the sensitivity of the disclosed data is far greater than typical names or email addresses, including birth dates, addresses, phone numbers, copies of passports or driver's licenses, identity verification selfies, as well as account statements, IBANs, withdrawal records, and complete transaction histories, which may even include Bitcoin transaction records.
The latest leaked data also shows that attackers have begun to publicly disclose identity documents and verification photos allegedly belonging to the victimized customers. Since September 13, data has been circulating on X and Telegram, including files allegedly related to some public figures.
The UK's Information Commissioner's Office (ICO) has confirmed to City AM that it has received an incident report submitted by Revolut and is currently assessing the relevant data.
This is crucial because the incident is not a traditional hacking scenario where hackers directly breach a database, but rather attackers successfully passed the company's internal verification process by utilizing "legitimate government email infrastructure." Revolut is currently facing not only email security issues but also whether financial institutions have sufficient second-layer verification mechanisms when handling law enforcement and government data requests.
Revolut emphasized that its core infrastructure, databases, and customer accounts have not been breached; however, this highlights another risk that financial institutions are increasingly struggling to prevent: even if the bank itself has not been "hacked," criminals can still obtain highly sensitive KYC and financial data if they control or misuse trusted government communication channels.
Bitcoin Transaction History Leaked, Risks Extend Beyond Identity Theft
This incident is particularly sensitive for cryptocurrency users.
Traditional identity data breaches usually lead to phishing, SIM swapping, account takeover, or identity theft risks; however, if attackers simultaneously possess real names, addresses, passports, and complete Bitcoin transaction histories, they could potentially link physical identities directly to specific cryptocurrency asset activities.
On-chain investigator ZachXBT previously suspected that the incident might involve targeted attacks on high-net-worth users. However, Revolut has yet to disclose the number of affected users or confirm whether the incident is concentrated among high-net-worth clients.
Therefore, it cannot yet be directly defined as an "attack targeting crypto millionaires," but once KYC data, addresses, and on-chain activities fall into the hands of criminals, the subsequent risks are clearly much higher than a typical email address leak.
As of the evening of September 14, Revolut has not publicly disclosed the exact number of affected customers, the names of the compromised government agencies, nor confirmed the specific ransom amount demanded by the attackers.
What can be confirmed is that the incident has escalated from "misdelivery of customer data" to public extortion; the attackers have indeed begun to release the customer data they claim to have obtained. As for their claim that they will continue to leak data "daily," this remains a threat from the attackers, and it is still necessary to observe whether subsequent data continues to appear.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Hedge funds increase gross assets by 400 billion ahead of Bitcoin rate test

BlackRock Holds 890,000 Bitcoins Worth $69 Billion

A Bitcoin Berkshire Model: Orange Juice

Morgan Stanley Increases Bitcoin Purchases to $609 Million

Leveraged funds increase Bitcoin futures shorts by 1669 BTC to 39876 BTC

KULR Sells Last 764 Bitcoins for Approximately $58.6 Million

The Fed, BoE, and BoJ Set the Direction for the Crypto Market This Week - Fintech World

Liberland Receives 804,000 Citizenship Applications

Trump Agrees to New Ethical Rules to Pass US Crypto Bill - Fintech World

US Regulators Define Bitcoin and XRP as Digital Commodities

Bitcoin Rises, But Demand in the Spot Market Remains Weak

Challenging 5 Days for Crypto and Markets: Three Major Decisions Ahead!

Retail Investors Support South Korea's Crypto Market as Corporate Accounts Remain Unopened

Bitcoin Suisse to Relocate Up to 60 Jobs Abroad

The 82 Trillion Won Gap: The Corporate Market South Korea Missed

Bitcoin Now Accounts for 85% of Some Portfolios, Up from 2% Initially

Bitcoin is set for a MASSIVE fundamental week! Analysis by Vincent Ganne

BlackRock Bitcoin ETF Outflows: $19 Million Exited from IBIT, Only 0.03%

XRPL processes 3,254 transactions in single block

Albuquerque Bans Cryptocurrency ATM and Over-the-Counter Trading Services

Metaplanet launches $1M Hong Kong Bitcoin unit

Nu launches U.S. banking and USDC global account

What is wash trading? The trading minute

Born in Argentina, it became the safest global crypto asset app in Latin America

Killa: Bitcoin Prices Move Ahead of Macroeconomic Changes

WEEX Exclusive:Bitcoin Falls to $77,000; FOMC in Focus This Week | WEEX TradFi Daily (September 14, 2026)

Bitcoin Falls to $77,000; FOMC in Focus This Week | WEEX TradFi Daily (September 14, 2026)
Ahead of the September 14 open, global markets are focused on this week’s FOMC. After hotter-than-expected August inflation, odds of a September 16 hike rose above about 85%. Bitcoin broke below $77,000 to about $76,700–$76,800, with Ethereum near $2,500. In Friday’s session, communication services and industrials outperformed, while Apple closed up about 1.75%. CrowdStrike (CRWD) drew attention after unveiling AI-agent protection products at Fal.Con, and investors are also waiting for this week’s key CLARITY Act procedural vote and the rate decision.

Bitcoin Confirms Technical Bottom, Possibility of Mild Bull Market

Gareth Soloway: Factors Behind Bitcoin's Bullish Trend Are Interest Rates and Distrust in Fiat Currency










